Wenzel / osw-fs-windows
A git history of Windows filesystems
☆76Updated 4 years ago
Alternatives and similar repositories for osw-fs-windows:
Users that are interested in osw-fs-windows are comparing it to the libraries listed below
- Ebfuscator: Abusing system errors for binary obfuscation☆52Updated 4 years ago
- ☆48Updated 4 years ago
- POC viruses I have created to demo some ideas☆59Updated 4 years ago
- ☆66Updated last year
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆44Updated 6 years ago
- ☆49Updated 4 years ago
- Crystal Anti-Exploit Protection 2012☆35Updated 4 years ago
- Sysmon shenanigans☆66Updated 4 years ago
- Tools for instrumenting Windows Defender's mpengine.dll☆36Updated 6 years ago
- Parsers for custom malware formats ("Funky malware formats")☆92Updated 3 years ago
- A C++ POC for process injection using NtCreateSectrion, NtMapViewOfSection and RtlCreateUserThread. Credit to @spotheplanet for his notes…☆43Updated 3 years ago
- This is a simple tool to dump all the reparse points on an NTFS volume.☆31Updated 4 years ago
- Flare-On solutions☆36Updated 5 years ago
- Process reimaging proof of concept code☆95Updated 5 years ago
- ☆68Updated 2 years ago
- Go Lang Portable Executable Parser☆39Updated 3 years ago
- Import DynamoRIO drcov code coverage data into Ghidra☆42Updated last year
- Helper idapython code for reversing kmdf drivers☆72Updated 2 years ago
- ☆45Updated 6 years ago
- ☆49Updated 5 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆119Updated 4 years ago
- A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.☆87Updated 10 years ago
- ☆33Updated 3 years ago
- PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.☆57Updated 3 years ago
- Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.☆48Updated 4 years ago
- ☆107Updated 4 years ago
- Google Chrome Use After Free☆55Updated 2 years ago
- Heappo 🦛 is a PyKD based extensions for WinDBG which aids Heap Exploitation☆13Updated 4 years ago
- FLARE Kernel Shellcode Loader☆176Updated 5 years ago
- ☆46Updated 5 years ago